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31 
CLAIMS 

What is claimed is: 

1. A method for restricting access to a set of 
resources in a distributed data processing system, the 
method comprising : 

determining a set of authorized resources for which 
a user is authorized to access, wherein the set of 
authorized resources is a subset of the set of resources 

obtaining state information about the set of 
authorized resources ; 

evaluating availability of the set of authorized 
resources based upon the state information about the set 
of authorized resources; and 

in response to evaluating availability of the set oi 
authorized resources, generating a list of a set of 
entitled resources for the user, wherein the set of 
entitled resources is a subset of the set of authorized 
resources . 

2. The method of claim 1 further comprising: 
sending an indication of the set of entitled 

resources to the user. 

3. The method of claim 1 further comprising: 
responding to requests for the user to access the 

set of entitled resources. 



AUS920030327US1 

32 

4. The method of claim 1 further comprising: 
preventing the user from accessing resources that 

are in the set of authorized resources but that are not 
in the set of entitled resources. 

5 

5. The method of claim 1 further comprising: 
considering user attributes of the user while 

evaluating availability of the set of authorized 
resources . 

10 

6. The method of claim 1 further comprising: 
performing the evaluation of availability of the set 

of authorized resources in accordance with a configurable 
rule associated with one or more resources in the set of 
15 authorized resources. 



7. The method of claim 1 further comprising: 

gathering state information for the set of resources 
using a distributed monitoring application. 



20 
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8. An apparatus for restricting access to a set of 
resources in a distributed data processing system, the 
apparatus comprising : 

means for determining a set of authorized resources 
for which a user is authorized to access, wherein the set 
of authorized resources is a subset of the set of 
resources ; 

means for obtaining state information about the set 
of authorized resources; 

means for evaluating availability of the set of 
authorized resources based upon the state information 
about the set of authorized resources; and 

means for generating a list of a set of entitled 
resources for the user in response to evaluating 
availability of the set of authorized resources, wherein 
the set of entitled resources is a subset of the set of 
authorized resources. 

9. The apparatus of claim 8 further comprising: 
means for sending an indication of the set of 

entitled resources to the user. 

10. The apparatus of claim 8 further comprising: 
means for responding to requests for the user to 

access the set of entitled resources. 

11. The apparatus of claim 8 further comprising: 
means for preventing the user from accessing 

resources that are in the set of authorized resources but 
that are not in the set of entitled resources. 
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12. The apparatus of claim 8 further comprising: 
means for considering user attributes of the user 

while evaluating availability of the set of authorized 
resources . 

13. The apparatus of claim 8 further comprising: 

means for performing the evaluation of availability 
of the set of authorized resources in accordance with a 
configurable rule associated with one or more resources 
in the set of authorized resources. 

14. The apparatus of claim 8 further comprising: 

means for gathering state information for the set of 
resources using a distributed monitoring application. 
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15. A computer program product in a computer readable 
medium for use in a distributed data processing system 
for restricting access to a set of resources, the 
computer program product comprising: 
5 means for determining a set of authorized resources 

for which a user is authorized to access, wherein the set 
of authorized resources is a subset of the set of 
resources ; 

means for obtaining state information about the set 
10 of authorized resources; 

means for evaluating availability of the set of 
authorized resources based upon the state information 
about the set of authorized resources; and 

means for generating a list of a set of entitled 
15 resources for the user in response to evaluating 

availability of the set of authorized resources, wherein 
the set of entitled resources is a subset of the set of 
authorized resources . 



20 16. The computer program product of claim 15 further 
comprising : 

means for sending an indication of the set of 
entitled resources to the user. 



25 17. The computer program product of claim 15 further 
comprising : 

means for responding to requests for the user to 
access the set of entitled resources. 
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18. The computer program product of claim 15 further 
comprising : 

means for preventing the user from accessing 
resources that are in the set of authorized resources but 
that are not in the set of entitled resources. 

19. The computer program product of claim 15 further 
comprising : 

means for considering user attributes of the user 
while evaluating availability of the set of authorized 
resources . 

20. The computer program product of claim 15 further 
comprising : 

means for performing the evaluation of availability 
of the set of authorized resources in accordance with a 
configurable rule associated with one or more resources 
in the set of authorized resources. 

21. The computer program product of claim 15 further 
comprising : 

means for gathering state information for the set of 
resources using a distributed monitoring application. 



